CVE-2023-47856

A stack-based buffer overflow vulnerability exists in the boa setRadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-45215

Realtek rtl819x Jungle SDK v3.4.11 contains a stack-based buffer overflow in the boa web server API setRepeaterSsid. TALOS-2023-1891 explains that, when repeaterEnabled and repeaterSSID parameters are processed, an unchecked copy into a 33-byte stack buffer in setRepeaterSsid can overflow, allowi...

CVE-2023-45215

A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-45215

A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-47856

A stack-based buffer overflow vulnerability exists in the boa setRadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-47856

Realtek rtl819x Jungle SDK v3.4.11 contains a stack-based buffer overflow in Boa’s set_RadvdPrefixParam API (formRadvd) that can be triggered by crafted HTTP requests to cause remote code execution. Affected hardware includes LevelOne WBR-6013 routers using Jungle SDK and Boa web server. TALOS de...

CVE-2023-50240

Two stack-based buffer overflow vulnerabilities exist in the boa setRadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these...

CVE-2023-50239

Two stack-based buffer overflow vulnerabilities exist in the boa setRadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these...

CVE-2023-50239

Two stack-based buffer overflow vulnerabilities exist in the boa setRadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these...

CVE-2023-50239

Two stack-based buffer overflow vulnerabilities (CVE-2023-50239, CVE-2023-50240) exist in Realtek rtl819x Jungle SDK v3.4.11, used by Boa web server in the LevelOne WBR-6013 router. The flaw is in set_RadvdInterfaceParam: the interfacename parameter is copied into a stack-allocated radvdCfgParam ...

CVE-2023-50240

Realtek rtl819x Jungle SDK v3.4.11 contains two stack-based buffer overflow vulnerabilities in boa’s formRadvd interfaces (set_RadvdInterfaceParam), allowing remote code execution when an attacker crafts requests that supply oversized interfacename or AdvDefaultPreference parameters. The flaws re...

CVE-2023-50240

Two stack-based buffer overflow vulnerabilities exist in the boa setRadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these...

CVE-2023-41251

A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2023-50243

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2023-50244

Summary (CVE-2023-50244): Realtek rtl819x Jungle SDK v3.4.11 uses Boa as a web server; the Boa API /boafrm/formIpQoS contains two stack-based buffer overflow conditions in the entry_name and comment handling. Specifically, the issue arises when a crafted HTTP request supplies a long entry_name pa...

CVE-2023-50244

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2023-41251

Summary: CVE-2023-41251 is a real vulnerability in Realtek rtl819x Jungle SDK v3.4.11 used by LevelOne WBR-6013 routers. The issue is a stack-based buffer overflow in Boa’s formRoute API when processing the subnet parameter, which can be triggered by a crafted HTTP request and may allow remote co...

CVE-2023-50244

Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2023-50243

Realtek rtl819x Jungle SDK v3.4.11 (Boa web server) contains two stack-based buffer overflow vulnerabilities in boa formIpQoS: CVE-2023-50243 (comment) and CVE-2023-50244 (entry_name). Exploitation via specially crafted HTTP requests to /boafrm/formIpQoS can lead to remote code execution; PoCs ar...

CVE-2023-41251

A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...